22
Table 8
ICMP-specific parameters for IPv4 advanced ACL rules
Parameters
Function
Description
icmp-type
{
icmp-type
icmp-code
|
icmp-message
}
Specifies the ICMP message
type and code
The
icmp-type
argument ranges from 0 to
255.
The
icmp-code
argument ranges from 0
to 255.
The
icmp-message
argument specifies a
message name. Supported ICMP
message names and their corresponding
type and code values are listed in
Table 9
ICMP message names supported in IPv4 advanced ACL rules
ICMP message name
ICMP message type
ICMP message code
echo 8
0
echo-reply 0
0
fragmentneed-DFset 3
4
host-redirect 5
1
host-tos-redirect 5
3
host-unreachable 3
1
information-reply 16
0
information-request 15
0
net-redirect 5
0
net-tos-redirect 5
2
net-unreachable 3
0
parameter-problem 12
0
port-unreachable 3
3
protocol-unreachable 3
2
reassembly-timeout 11
1
source-quench 4
0
source-route-failed 3
5
timestamp-reply 14
0
timestamp-request 13
0
ttl-exceeded 11
0
Description
Use the
rule
command to create or edit an IPv4 advanced ACL rule. You can edit ACL rules only when
the match order is config.
Use the
undo
rule
command to delete an entire IPv4 advanced ACL rule or some attributes in the rule. If
no optional keywords are provided, you delete the entire rule. If optional keywords or arguments are
provided, you delete the specific attributes.